
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa
File: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (raw, json)
Hash identifier: bzbQyehOXR0BUaS8fMBWL/AuVpFlX4q7jGyljHVAKoE=
Subject key identifier: BF:8B:DA:3C:02:9B:77:92:01:28:1E:1A:16:9B:15:42:39:35:17:16
Certificate issuer: /CN=0E746D06BBB2B42B9F3E3A274069EDD4026E0981
Certificate serial: 18C85897711F7E04DE66729D23B783B1186869BA
Authority key identifier: 0E:74:6D:06:BB:B2:B4:2B:9F:3E:3A:27:40:69:ED:D4:02:6E:09:81
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa
Signing time: Sun 03 May 2026 03:17:49 +0000
ROA not before: Sun 03 May 2026 03:12:49 +0000
ROA not after: Sun 02 May 2027 03:17:49 +0000
asID: 149882
IP address blocks: 103.185.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.crl
rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c8:58:97:71:1f:7e:04:de:66:72:9d:23:b7:83:b1:18:68:69:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E746D06BBB2B42B9F3E3A274069EDD4026E0981
Validity
Not Before: May 3 03:12:49 2026 GMT
Not After : May 2 03:17:49 2027 GMT
Subject: CN=BF8BDA3C029B779201281E1A169B154239351716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:f6:5a:fd:92:25:70:3a:4e:da:31:94:f5:
74:a8:5b:d4:89:3a:9b:0a:e6:14:49:87:c5:45:b7:
c9:4f:cb:22:22:ea:6a:b9:cc:ca:ca:d0:e2:88:8f:
f0:e1:7a:35:70:6e:4e:52:39:1e:e9:f9:31:98:fe:
8e:d9:0c:db:9c:cd:52:9e:45:0a:03:b2:43:69:db:
77:1b:7e:e6:e7:69:a7:ee:3b:74:c7:da:65:3c:f2:
d5:4a:42:1b:de:2a:d2:22:c7:b1:08:94:b6:2a:f4:
02:6c:09:db:96:07:fe:cc:5f:46:0f:f1:5b:3e:9a:
22:55:d5:e4:b1:61:9d:66:30:df:d0:1e:62:d9:2d:
35:60:f0:24:b4:56:0d:e7:70:c3:5a:33:b6:93:40:
67:ce:93:f2:19:dc:3c:b8:56:1a:6d:25:28:f5:e9:
c9:ec:d3:53:4e:0b:fc:a8:f2:59:8c:9e:89:59:fe:
cb:cd:39:e9:d2:40:3c:fd:30:3f:1d:e4:02:26:f2:
e8:99:4a:e7:1f:3a:18:a4:e4:b4:cd:8f:0d:3d:a9:
66:30:91:f3:66:f6:84:4e:e7:9e:f7:9e:36:1d:b2:
e3:64:69:1b:da:ea:2b:fa:97:d7:6b:72:82:1c:28:
c6:b9:58:9b:da:4c:5b:58:65:1c:20:f3:3a:37:cd:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:DA:3C:02:9B:77:92:01:28:1E:1A:16:9B:15:42:39:35:17:16
X509v3 Authority Key Identifier:
keyid:0E:74:6D:06:BB:B2:B4:2B:9F:3E:3A:27:40:69:ED:D4:02:6E:09:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.111.0/24
Signature Algorithm: sha256WithRSAEncryption
64:25:8a:58:0e:04:d9:ac:c2:fc:a8:f9:7a:31:4c:21:53:27:
6f:dc:40:84:ed:02:c8:55:e8:11:22:58:ac:33:6f:ec:77:ab:
cc:52:ed:93:6e:e3:35:ba:8e:58:65:bb:91:b1:1b:04:7c:1f:
3a:8b:a6:16:05:33:99:f2:1b:4c:05:f5:68:5a:c8:96:e7:0e:
a9:dc:ed:71:71:1b:22:e5:af:b8:f0:46:65:c3:4e:e2:ea:c4:
17:5b:70:dd:3b:d2:2a:6f:86:22:9c:7d:80:10:2a:2b:61:91:
75:f0:89:98:4d:fa:bc:f6:87:bb:96:e4:c7:68:e8:e1:ef:09:
dd:55:17:c9:3c:0c:bd:7a:15:1a:ef:b3:a7:64:60:dd:a9:6e:
bf:c7:31:5d:fb:4b:d1:15:42:f3:92:72:f6:6a:7f:a7:14:6a:
bf:b8:26:29:57:cf:c6:e5:8f:48:20:e8:e0:cc:9e:75:b7:64:
24:28:38:0a:5a:e7:06:b9:be:78:cb:51:94:df:7f:a7:53:8f:
d0:00:7b:0c:52:e4:64:d6:e7:35:77:d4:db:07:2e:f0:20:61:
25:dc:e2:66:d7:b2:5b:e2:0b:cd:a2:04:b6:de:8b:64:3d:25:
2e:b7:cf:fc:2a:fc:c0:1d:d7:61:1f:1b:3b:bd:72:72:54:66:
d6:1a:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:36 2026 by rpki-client